OpenShift advise that images change permissions of paths that applications might need to write to, to group root and group-writeable:

https://docs.openshift.com/container-platform/4.9/openshift_images/create-images.html#use-uid_create-images

We do this for /home/jboss in the builder images (in s2i/core/bash module) and should also do it in the runtime images. We can't include that module in the runtime images.

I think we should move the chown out of that s2i module and adjacent to where the home directory is created in modules/user/configure.sh.